This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json) Hash identifier: KUwuxLWR4oPLrJ0a23RW+sQrXbjWdVFeYjzWXbW6tlg= Subject key identifier: BA:0D:B8:4D:41:A1:5A:72:FC:6D:1F:AA:8C:22:1E:49:31:E7:40:86 Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Certificate serial: 019BF386FCAD02E0E8056BCD77B6E273250D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft Manifest number: 0A19 Signing time: Sun 25 Jan 2026 05:01:08 +0000 Manifest this update: Sun 25 Jan 2026 05:01:08 +0000 Manifest next update: Mon 26 Jan 2026 05:01:08 +0000 Files and hashes: 1: 5QMp3XV_wAqdBe0SsahQPe_A6PM.roa (hash: t27wu0dJA6WxebtISJDZ4r6J1S7Z1TLaFhiE16zB+EA=) 2: Gd0qEhznbnRm5zz3or9DoqKwy8Q.roa (hash: bVT9DLS0tZiO8vtO74zYTRPqdZYiI50IXe67hgZXAOE=) 3: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: lUcU/xX5cFIvTbY+jzzF/chL8c2l+FAbnth7g5IL1V8=) 4: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:fc:ad:02:e0:e8:05:6b:cd:77:b6:e2:73:25:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Validity Not Before: Jan 25 05:01:08 2026 GMT Not After : Jan 26 05:01:08 2026 GMT Subject: CN=ba0db84d41a15a72fc6d1faa8c221e4931e74086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:16:05:fc:f6:ac:4b:cb:f7:7d:10:a3:48: a0:5e:8d:76:a3:9f:11:6b:2f:d7:48:ac:56:9c:83: 19:62:ad:77:0a:2c:6e:97:78:c7:4e:d2:45:e3:31: 49:3f:3a:be:36:d0:80:06:33:d6:29:65:81:66:fe: 19:38:db:48:43:4c:bd:e5:43:51:50:5a:04:0f:b2: 44:cf:b1:76:42:47:d1:dd:2a:ae:89:ce:8a:3a:c2: 18:fe:f1:2e:3e:1b:2c:98:d8:8b:cc:8a:73:bd:4a: b4:48:37:85:9c:26:c0:02:7f:77:2e:ac:38:84:71: 96:f6:68:6b:db:34:af:ad:59:f8:c3:5f:50:5b:ff: 41:73:1d:a7:c9:44:7b:b1:a5:a9:c8:ba:6b:47:3a: 6d:c6:be:fc:bb:94:ec:21:b3:92:7a:d6:74:a1:d9: e1:b5:72:6c:25:f9:6f:1f:08:6d:ca:e4:d8:e1:b3: bd:b1:05:e7:70:6c:22:13:2a:b1:fa:da:a1:75:b5: 61:6f:4f:2d:3a:46:95:3a:f2:65:45:df:ab:0d:77: 8f:9a:0c:2e:39:53:22:76:f5:f3:48:e9:71:4f:4c: f3:c5:98:31:4f:f2:23:f1:49:6e:da:d1:38:55:f4: a1:b0:3c:9b:c9:18:ca:8b:04:c8:a4:f8:a8:74:af: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:B8:4D:41:A1:5A:72:FC:6D:1F:AA:8C:22:1E:49:31:E7:40:86 X509v3 Authority Key Identifier: keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a8:87:73:26:d2:7f:62:09:9c:22:c9:58:75:a3:e3:52:fb: 15:5a:0a:7c:8e:bc:15:89:73:d2:51:24:c7:e0:db:71:f6:af: 92:af:7e:d1:ff:88:f4:64:00:91:4e:26:38:72:2d:c0:63:5f: 3c:3c:09:a5:6c:27:3b:d7:51:9f:c7:94:66:cf:56:5e:b8:e6: 1c:1c:32:4c:62:d1:ee:a6:87:2e:b9:43:2f:a3:66:85:9a:f8: 51:62:99:24:fa:e5:11:dd:50:dc:c3:19:9d:62:65:50:3b:44: b6:19:de:fd:44:bd:60:20:fd:51:fa:2b:95:cb:43:7e:a1:55: 69:66:62:ef:68:bc:4f:c3:7e:b4:2b:2a:95:d2:c9:76:8f:47: 34:f0:bf:64:30:56:c1:12:00:cb:22:97:46:8b:ea:52:22:75: 89:be:0e:f9:89:e2:1a:29:92:a9:0a:d1:25:04:27:9d:27:24: 4c:b1:bb:43:4c:69:62:5a:2c:48:63:dd:58:29:07:68:7d:fd: 84:ed:4d:be:c3:2e:d9:78:2f:69:c4:a5:ad:d9:d4:ec:13:fc: 8e:c8:04:ab:bf:ac:42:82:4b:c8:f9:9d:f5:6d:83:2e:56:74: b0:09:0d:09:d5:33:82:33:5a:04:31:a6:b0:27:2e:26:d1:91: cd:1a:48:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhvytAuDoBWvNd7bicyUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODE0ZGQzOWRkMzkyNWNmZjg4YmYzNGQ0MzA3ZmQ2YzYy MTY1ZWIwHhcNMjYwMTI1MDUwMTA4WhcNMjYwMTI2MDUwMTA4WjAzMTEwLwYDVQQD EyhiYTBkYjg0ZDQxYTE1YTcyZmM2ZDFmYWE4YzIyMWU0OTMxZTc0MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu68WBfz2rEvL930Qo0igXo12o58R ay/XSKxWnIMZYq13Cixul3jHTtJF4zFJPzq+NtCABjPWKWWBZv4ZONtIQ0y95UNR UFoED7JEz7F2QkfR3Squic6KOsIY/vEuPhssmNiLzIpzvUq0SDeFnCbAAn93Lqw4 hHGW9mhr2zSvrVn4w19QW/9Bcx2nyUR7saWpyLprRzptxr78u5TsIbOSetZ0odnh tXJsJflvHwhtyuTY4bO9sQXncGwiEyqx+tqhdbVhb08tOkaVOvJlRd+rDXePmgwu OVMidvXzSOlxT0zzxZgxT/Ij8Ulu2tE4VfShsDybyRjKiwTIpPiodK/joQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoNuE1BoVpy/G0fqowiHkkx50CGMB8GA1UdIwQY MBaAFJCBTdOd05Jc/4i/NNQwf9bGIWXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjkt OTQwYWU0NTRjYjg1LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjktOTQwYWU0NTRjYjg1 LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6iHcybS f2IJnCLJWHWj41L7FVoKfI68FYlz0lEkx+Dbcfavkq9+0f+I9GQAkU4mOHItwGNf PDwJpWwnO9dRn8eUZs9WXrjmHBwyTGLR7qaHLrlDL6NmhZr4UWKZJPrlEd1Q3MMZ nWJlUDtEthne/US9YCD9UforlctDfqFVaWZi72i8T8N+tCsqldLJdo9HNPC/ZDBW wRIAyyKXRovqUiJ1ib4O+YniGimSqQrRJQQnnSckTLG7Q0xpYlosSGPdWCkHaH39 hO1NvsMu2XgvacSlrdnU7BP8jsgEq7+sQoJLyPmd9W2DLlZ0sAkNCdUzgjNaBDGm sCcuJtGRzRpIKw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:50:02 2026 by rpki-client